CVE-2026-64468
kernel: binder: fix UAF in binder_free_transaction()
Loading…
Severity
ModerateRed Hat Product Security
CVSS
Review impact separately from score.
Published · July 25, 2026
Updated · July 30, 2026
Description
A flaw was found in the Linux kernel's binder component. A use-after-free (UAF) vulnerability exists in the binder_free_transaction() function, where a process's reference is accessed after the lock protecting it is released, allowing the process to terminate prematurely. A local attacker with low privileges could exploit this to cause a system crash (denial of service) or potentially gain elevated privileges.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CWE-366 · Race Condition within a Thread